@lumibase/mcp-server 0.24.1 → 0.26.0

package/dist/index.cjs

@@ -271,14 +271,14 @@ var policySchema = import_zod3.z.object({
   ipDeny: import_zod3.z.array(import_zod3.z.string()).optional(),
   validFrom: import_zod3.z.string().datetime().nullable().optional(),
   validUntil: import_zod3.z.string().datetime().nullable().optional(),
-  rules: import_zod3.z.record(import_zod3.z.unknown()).optional()
+  rules: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).optional()
 });
 var permissionSchema = import_zod3.z.object({
   collection: import_zod3.z.string().min(1).max(64),
   action: import_zod3.z.enum(["create", "read", "update", "delete", "share"]),
-  permissions: import_zod3.z.record(import_zod3.z.unknown()).optional(),
-  validation: import_zod3.z.record(import_zod3.z.unknown()).optional(),
-  presets: import_zod3.z.record(import_zod3.z.unknown()).optional(),
+  permissions: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).optional(),
+  validation: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).optional(),
+  presets: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).optional(),
   fields: import_zod3.z.array(import_zod3.z.string()).optional()
 });
 function registerAccessTools(server, client) {
@@ -420,7 +420,7 @@ function registerAccessTools(server, client) {
     "dry_run_access_import",
     {
       description: "Validate an RBAC manifest import without applying it. Returns the planned changes.",
-      inputSchema: { manifest: import_zod3.z.record(import_zod3.z.unknown()).describe("RBAC manifest from export_access.") }
+      inputSchema: { manifest: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).describe("RBAC manifest from export_access.") }
     },
     async ({ manifest }) => run(() => client.post("/access/import?dryRun=true", manifest))
   );
@@ -429,7 +429,7 @@ function registerAccessTools(server, client) {
     {
       description: "Apply an RBAC manifest import. High-impact \u2014 changes roles/policies/permissions. Pass confirm=true.",
       inputSchema: {
-        manifest: import_zod3.z.record(import_zod3.z.unknown()).describe("RBAC manifest from export_access."),
+        manifest: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).describe("RBAC manifest from export_access."),
         mode: import_zod3.z.enum(["merge", "replace-managed", "replace-all"]).optional().describe("Import mode (default merge)."),
         confirm: import_zod3.z.literal(true).describe(confirmDescription)
       }
@@ -458,7 +458,7 @@ var materializeSchema = import_zod4.z.object({
   refreshStrategy: import_zod4.z.enum(["auto", "cron", "manual"]).optional(),
   refreshCron: import_zod4.z.string().optional(),
   projection: import_zod4.z.object({ fields: import_zod4.z.array(import_zod4.z.string()).optional(), orderBy: import_zod4.z.string().optional() }).optional(),
-  filter: import_zod4.z.record(import_zod4.z.unknown()).optional()
+  filter: import_zod4.z.record(import_zod4.z.string(), import_zod4.z.unknown()).optional()
 });
 function registerAdminTools(server, client) {
   server.registerTool(
@@ -527,16 +527,16 @@ var import_zod5 = require("zod");
 var intentSchema = import_zod5.z.object({
   name: import_zod5.z.string().min(1).max(120),
   collection: import_zod5.z.string().min(1).max(120),
-  rules: import_zod5.z.array(import_zod5.z.record(import_zod5.z.unknown())).describe("SLO rules (required_fields, freshness, translations, link_health, \u2026)."),
+  rules: import_zod5.z.array(import_zod5.z.record(import_zod5.z.string(), import_zod5.z.unknown())).describe("SLO rules (required_fields, freshness, translations, link_health, \u2026)."),
   schedule: import_zod5.z.string().describe("5-field cron expression for reconciliation cadence."),
-  budget: import_zod5.z.record(import_zod5.z.unknown()).optional(),
+  budget: import_zod5.z.record(import_zod5.z.string(), import_zod5.z.unknown()).optional(),
   autonomyCap: import_zod5.z.number().int().min(0).max(4).optional().describe("Max autonomy level L0\u2013L4 for this intent."),
-  maintenanceWindow: import_zod5.z.record(import_zod5.z.unknown()).nullable().optional()
+  maintenanceWindow: import_zod5.z.record(import_zod5.z.string(), import_zod5.z.unknown()).nullable().optional()
 });
 var flowNode = import_zod5.z.object({
   id: import_zod5.z.string(),
   key: import_zod5.z.string(),
-  options: import_zod5.z.record(import_zod5.z.unknown()).optional(),
+  options: import_zod5.z.record(import_zod5.z.string(), import_zod5.z.unknown()).optional(),
   next: import_zod5.z.string().nullable().optional(),
   onError: import_zod5.z.string().nullable().optional()
 });
@@ -545,7 +545,7 @@ var flowSchema = import_zod5.z.object({
   description: import_zod5.z.string().optional(),
   status: import_zod5.z.enum(["active", "inactive", "draft"]).optional(),
   triggerType: import_zod5.z.enum(["webhook", "event", "schedule", "manual"]),
-  triggerOptions: import_zod5.z.record(import_zod5.z.unknown()).optional(),
+  triggerOptions: import_zod5.z.record(import_zod5.z.string(), import_zod5.z.unknown()).optional(),
   graph: import_zod5.z.object({
     entry: import_zod5.z.string().optional(),
     nodes: import_zod5.z.array(flowNode).optional()
@@ -603,7 +603,7 @@ function registerAgentTools(server, client) {
       description: "Trigger a manual run of a flow with an optional input payload.",
       inputSchema: {
         id: idPathSegmentSchema,
-        input: import_zod5.z.record(import_zod5.z.unknown()).optional().describe("Initial context passed to the flow.")
+        input: import_zod5.z.record(import_zod5.z.string(), import_zod5.z.unknown()).optional().describe("Initial context passed to the flow.")
       }
     },
     async ({ id, input }) => run(() => client.post(`/flows/${encodePathSegment(id)}/run`, input ?? {}))
@@ -644,7 +644,7 @@ function registerApiKeyTools(server, client) {
         name: import_zod6.z.string().min(1).max(96),
         description: import_zod6.z.string().max(512).optional(),
         expiresAt: import_zod6.z.string().datetime().nullable().optional(),
-        metadata: import_zod6.z.record(import_zod6.z.unknown()).optional()
+        metadata: import_zod6.z.record(import_zod6.z.string(), import_zod6.z.unknown()).optional()
       }
     },
     async (input) => run(() => client.post("/api-keys", input))
@@ -773,7 +773,7 @@ function registerCdcTools(server, client) {
     {
       description: "Rewind a subscription checkpoint inside the retention window (resets dead/stale back to active).",
       inputSchema: {
-        subscription_id: import_zod7.z.string().describe("Subscription id."),
+        subscription_id: idPathSegmentSchema.describe("Subscription id."),
         occurred_after: import_zod7.z.string().optional().describe("ISO timestamp to rewind to (within retention)."),
         cursor: import_zod7.z.string().optional().describe("Exact cursor token to rewind to.")
       }
@@ -783,7 +783,7 @@ function registerCdcTools(server, client) {
       if (args.cursor) body.cursor = args.cursor;
       if (args.occurred_after) body.occurred_after = args.occurred_after;
       const result = await client.post(
-        `/cdc/subscriptions/${encodeURIComponent(args.subscription_id)}/replay`,
+        `/cdc/subscriptions/${encodePathSegment(args.subscription_id)}/replay`,
         body
       );
       return { content: [{ type: "text", text: JSON.stringify(result) }] };
@@ -830,7 +830,7 @@ var fieldInputSchema = import_zod8.z.object({
   width: import_zod8.z.enum(["half", "full", "fill"]).optional(),
   sortOrder: import_zod8.z.number().int().optional(),
   group: import_zod8.z.string().optional(),
-  options: import_zod8.z.record(import_zod8.z.unknown()).optional(),
+  options: import_zod8.z.record(import_zod8.z.string(), import_zod8.z.unknown()).optional(),
   defaultValue: import_zod8.z.unknown().optional()
 });
 function formatError2(err) {
@@ -982,10 +982,10 @@ var presetSchema = import_zod9.z.object({
   userId: import_zod9.z.string().nullable().optional(),
   roleId: import_zod9.z.string().nullable().optional(),
   layout: import_zod9.z.string().optional(),
-  layoutQuery: import_zod9.z.record(import_zod9.z.unknown()).optional(),
-  layoutOptions: import_zod9.z.record(import_zod9.z.unknown()).optional(),
+  layoutQuery: import_zod9.z.record(import_zod9.z.string(), import_zod9.z.unknown()).optional(),
+  layoutOptions: import_zod9.z.record(import_zod9.z.string(), import_zod9.z.unknown()).optional(),
   search: import_zod9.z.string().nullable().optional(),
-  filter: import_zod9.z.record(import_zod9.z.unknown()).optional(),
+  filter: import_zod9.z.record(import_zod9.z.string(), import_zod9.z.unknown()).optional(),
   icon: import_zod9.z.string().nullable().optional(),
   color: import_zod9.z.string().nullable().optional(),
   refreshInterval: import_zod9.z.number().int().min(0).optional()
@@ -1055,7 +1055,7 @@ function registerContentConfigTools(server, client) {
       description: "Create or update a setting (upsert by key).",
       inputSchema: {
         key: idPathSegmentSchema,
-        value: import_zod9.z.record(import_zod9.z.unknown()).describe("Arbitrary JSON value object for the setting."),
+        value: import_zod9.z.record(import_zod9.z.string(), import_zod9.z.unknown()).describe("Arbitrary JSON value object for the setting."),
         scope: import_zod9.z.string().optional()
       }
     },
@@ -1203,7 +1203,7 @@ var extensionSchema = import_zod12.z.object({
   type: import_zod12.z.enum(EXTENSION_TYPES),
   enabled: import_zod12.z.boolean().optional(),
   bundleUrl: import_zod12.z.string().min(1).describe("https:, http:, or data:text/javascript bundle URL."),
-  manifest: import_zod12.z.record(import_zod12.z.string()).optional(),
+  manifest: import_zod12.z.record(import_zod12.z.string(), import_zod12.z.string()).optional(),
   capabilities: import_zod12.z.array(import_zod12.z.string()).optional()
 });
 function registerExtensionTools(server, client) {
@@ -1286,7 +1286,7 @@ function registerExtensionTools(server, client) {
       inputSchema: {
         extensionId: import_zod12.z.string().min(1),
         marketplaceSlug: import_zod12.z.string().min(1),
-        publisher: import_zod12.z.record(import_zod12.z.unknown()).optional(),
+        publisher: import_zod12.z.record(import_zod12.z.string(), import_zod12.z.unknown()).optional(),
         signature: import_zod12.z.string().optional(),
         signatureAlg: import_zod12.z.string().optional(),
         publisherKeyId: import_zod12.z.string().optional(),
@@ -1318,8 +1318,8 @@ var fieldInputSchema2 = import_zod13.z.object({
   precision: import_zod13.z.number().int().positive().optional(),
   scale: import_zod13.z.number().int().min(0).optional(),
   special: import_zod13.z.array(import_zod13.z.string()).optional(),
-  options: import_zod13.z.record(import_zod13.z.unknown()).optional(),
-  displayOptions: import_zod13.z.record(import_zod13.z.unknown()).optional(),
+  options: import_zod13.z.record(import_zod13.z.string(), import_zod13.z.unknown()).optional(),
+  displayOptions: import_zod13.z.record(import_zod13.z.string(), import_zod13.z.unknown()).optional(),
   conditions: import_zod13.z.array(import_zod13.z.unknown()).optional(),
   required: import_zod13.z.boolean().optional().default(false),
   readonly: import_zod13.z.boolean().optional().default(false),
@@ -1419,7 +1419,7 @@ var panelQueryShape = {
   aggregate: import_zod14.z.enum(AGGREGATES).describe("Aggregate function. `field` is required for everything except `count`."),
   field: import_zod14.z.string().min(1).optional().describe("Field to aggregate (required unless aggregate=count)."),
   groupBy: import_zod14.z.string().min(1).optional().describe("Field to group rows by (produces a series)."),
-  filter: import_zod14.z.record(import_zod14.z.unknown()).optional().describe('Directus-style condition rule, e.g. { status: { _eq: "published" } }.'),
+  filter: import_zod14.z.record(import_zod14.z.string(), import_zod14.z.unknown()).optional().describe('Directus-style condition rule, e.g. { status: { _eq: "published" } }.'),
   dateRange: dateRangeSchema.optional(),
   limit: import_zod14.z.number().int().min(1).max(1e3).optional().describe("Max grouped rows to return (default 50).")
 };
@@ -1455,7 +1455,7 @@ function registerInsightsTools(server, client) {
       inputSchema: {
         dashboardId: idPathSegmentSchema,
         panelId: idPathSegmentSchema,
-        filter: import_zod14.z.record(import_zod14.z.unknown()).optional().describe("Override the panel filter for this run (Directus-style condition rule)."),
+        filter: import_zod14.z.record(import_zod14.z.string(), import_zod14.z.unknown()).optional().describe("Override the panel filter for this run (Directus-style condition rule)."),
         dateRange: dateRangeSchema.optional().describe("Override the panel date range for this run.")
       }
     },
@@ -1557,7 +1557,7 @@ function registerItemTools(server, client) {
       description: "Create a new item in a collection.",
       inputSchema: {
         collection: collectionNameSchema,
-        data: import_zod15.z.record(import_zod15.z.unknown()).describe("Field values for the new item"),
+        data: import_zod15.z.record(import_zod15.z.string(), import_zod15.z.unknown()).describe("Field values for the new item"),
         status: import_zod15.z.enum(["draft", "published"]).optional().default("draft")
       }
     },
@@ -1580,7 +1580,7 @@ function registerItemTools(server, client) {
       inputSchema: {
         collection: collectionNameSchema,
         id: idPathSegmentSchema,
-        data: import_zod15.z.record(import_zod15.z.unknown()).describe("Fields to update")
+        data: import_zod15.z.record(import_zod15.z.string(), import_zod15.z.unknown()).describe("Fields to update")
       }
     },
     async ({ collection, id, data: itemData }) => {
@@ -1793,7 +1793,7 @@ function registerPermissionTools(server, client) {
       inputSchema: {
         collection: import_zod19.z.string().min(1),
         action: import_zod19.z.enum(["create", "read", "update", "delete", "share"]),
-        item: import_zod19.z.record(import_zod19.z.unknown()).optional().describe("Item payload to evaluate row-level rules against.")
+        item: import_zod19.z.record(import_zod19.z.string(), import_zod19.z.unknown()).optional().describe("Item payload to evaluate row-level rules against.")
       }
     },
     async (input) => run(() => client.post("/permissions/check", input))
@@ -1815,7 +1815,7 @@ var relationInputSchema = {
   junctionOneField: import_zod20.z.string().nullable().optional(),
   sortField: import_zod20.z.string().nullable().optional(),
   onDelete: import_zod20.z.enum(["restrict", "cascade", "set null", "no action"]).optional(),
-  meta: import_zod20.z.record(import_zod20.z.unknown()).optional()
+  meta: import_zod20.z.record(import_zod20.z.string(), import_zod20.z.unknown()).optional()
 };
 function registerRelationTools(server, client) {
   server.registerTool(
@@ -2115,7 +2115,7 @@ var webhookSchema = import_zod24.z.object({
   url: import_zod24.z.string().url(),
   actions: import_zod24.z.array(import_zod24.z.string()).optional().describe("Item events that trigger the webhook (e.g. create, update, delete)."),
   collections: import_zod24.z.array(import_zod24.z.string()).optional().describe("Collections to filter on (empty = all)."),
-  headers: import_zod24.z.record(import_zod24.z.string()).optional(),
+  headers: import_zod24.z.record(import_zod24.z.string(), import_zod24.z.string()).optional(),
   status: import_zod24.z.enum(["active", "inactive"]).optional(),
   secret: import_zod24.z.string().nullable().optional()
 });

package/dist/index.js

@@ -270,14 +270,14 @@ var policySchema = z3.object({
   ipDeny: z3.array(z3.string()).optional(),
   validFrom: z3.string().datetime().nullable().optional(),
   validUntil: z3.string().datetime().nullable().optional(),
-  rules: z3.record(z3.unknown()).optional()
+  rules: z3.record(z3.string(), z3.unknown()).optional()
 });
 var permissionSchema = z3.object({
   collection: z3.string().min(1).max(64),
   action: z3.enum(["create", "read", "update", "delete", "share"]),
-  permissions: z3.record(z3.unknown()).optional(),
-  validation: z3.record(z3.unknown()).optional(),
-  presets: z3.record(z3.unknown()).optional(),
+  permissions: z3.record(z3.string(), z3.unknown()).optional(),
+  validation: z3.record(z3.string(), z3.unknown()).optional(),
+  presets: z3.record(z3.string(), z3.unknown()).optional(),
   fields: z3.array(z3.string()).optional()
 });
 function registerAccessTools(server, client) {
@@ -419,7 +419,7 @@ function registerAccessTools(server, client) {
     "dry_run_access_import",
     {
       description: "Validate an RBAC manifest import without applying it. Returns the planned changes.",
-      inputSchema: { manifest: z3.record(z3.unknown()).describe("RBAC manifest from export_access.") }
+      inputSchema: { manifest: z3.record(z3.string(), z3.unknown()).describe("RBAC manifest from export_access.") }
     },
     async ({ manifest }) => run(() => client.post("/access/import?dryRun=true", manifest))
   );
@@ -428,7 +428,7 @@ function registerAccessTools(server, client) {
     {
       description: "Apply an RBAC manifest import. High-impact \u2014 changes roles/policies/permissions. Pass confirm=true.",
       inputSchema: {
-        manifest: z3.record(z3.unknown()).describe("RBAC manifest from export_access."),
+        manifest: z3.record(z3.string(), z3.unknown()).describe("RBAC manifest from export_access."),
         mode: z3.enum(["merge", "replace-managed", "replace-all"]).optional().describe("Import mode (default merge)."),
         confirm: z3.literal(true).describe(confirmDescription)
       }
@@ -457,7 +457,7 @@ var materializeSchema = z4.object({
   refreshStrategy: z4.enum(["auto", "cron", "manual"]).optional(),
   refreshCron: z4.string().optional(),
   projection: z4.object({ fields: z4.array(z4.string()).optional(), orderBy: z4.string().optional() }).optional(),
-  filter: z4.record(z4.unknown()).optional()
+  filter: z4.record(z4.string(), z4.unknown()).optional()
 });
 function registerAdminTools(server, client) {
   server.registerTool(
@@ -526,16 +526,16 @@ import { z as z5 } from "zod";
 var intentSchema = z5.object({
   name: z5.string().min(1).max(120),
   collection: z5.string().min(1).max(120),
-  rules: z5.array(z5.record(z5.unknown())).describe("SLO rules (required_fields, freshness, translations, link_health, \u2026)."),
+  rules: z5.array(z5.record(z5.string(), z5.unknown())).describe("SLO rules (required_fields, freshness, translations, link_health, \u2026)."),
   schedule: z5.string().describe("5-field cron expression for reconciliation cadence."),
-  budget: z5.record(z5.unknown()).optional(),
+  budget: z5.record(z5.string(), z5.unknown()).optional(),
   autonomyCap: z5.number().int().min(0).max(4).optional().describe("Max autonomy level L0\u2013L4 for this intent."),
-  maintenanceWindow: z5.record(z5.unknown()).nullable().optional()
+  maintenanceWindow: z5.record(z5.string(), z5.unknown()).nullable().optional()
 });
 var flowNode = z5.object({
   id: z5.string(),
   key: z5.string(),
-  options: z5.record(z5.unknown()).optional(),
+  options: z5.record(z5.string(), z5.unknown()).optional(),
   next: z5.string().nullable().optional(),
   onError: z5.string().nullable().optional()
 });
@@ -544,7 +544,7 @@ var flowSchema = z5.object({
   description: z5.string().optional(),
   status: z5.enum(["active", "inactive", "draft"]).optional(),
   triggerType: z5.enum(["webhook", "event", "schedule", "manual"]),
-  triggerOptions: z5.record(z5.unknown()).optional(),
+  triggerOptions: z5.record(z5.string(), z5.unknown()).optional(),
   graph: z5.object({
     entry: z5.string().optional(),
     nodes: z5.array(flowNode).optional()
@@ -602,7 +602,7 @@ function registerAgentTools(server, client) {
       description: "Trigger a manual run of a flow with an optional input payload.",
       inputSchema: {
         id: idPathSegmentSchema,
-        input: z5.record(z5.unknown()).optional().describe("Initial context passed to the flow.")
+        input: z5.record(z5.string(), z5.unknown()).optional().describe("Initial context passed to the flow.")
       }
     },
     async ({ id, input }) => run(() => client.post(`/flows/${encodePathSegment(id)}/run`, input ?? {}))
@@ -643,7 +643,7 @@ function registerApiKeyTools(server, client) {
         name: z6.string().min(1).max(96),
         description: z6.string().max(512).optional(),
         expiresAt: z6.string().datetime().nullable().optional(),
-        metadata: z6.record(z6.unknown()).optional()
+        metadata: z6.record(z6.string(), z6.unknown()).optional()
       }
     },
     async (input) => run(() => client.post("/api-keys", input))
@@ -772,7 +772,7 @@ function registerCdcTools(server, client) {
     {
       description: "Rewind a subscription checkpoint inside the retention window (resets dead/stale back to active).",
       inputSchema: {
-        subscription_id: z7.string().describe("Subscription id."),
+        subscription_id: idPathSegmentSchema.describe("Subscription id."),
         occurred_after: z7.string().optional().describe("ISO timestamp to rewind to (within retention)."),
         cursor: z7.string().optional().describe("Exact cursor token to rewind to.")
       }
@@ -782,7 +782,7 @@ function registerCdcTools(server, client) {
       if (args.cursor) body.cursor = args.cursor;
       if (args.occurred_after) body.occurred_after = args.occurred_after;
       const result = await client.post(
-        `/cdc/subscriptions/${encodeURIComponent(args.subscription_id)}/replay`,
+        `/cdc/subscriptions/${encodePathSegment(args.subscription_id)}/replay`,
         body
       );
       return { content: [{ type: "text", text: JSON.stringify(result) }] };
@@ -829,7 +829,7 @@ var fieldInputSchema = z8.object({
   width: z8.enum(["half", "full", "fill"]).optional(),
   sortOrder: z8.number().int().optional(),
   group: z8.string().optional(),
-  options: z8.record(z8.unknown()).optional(),
+  options: z8.record(z8.string(), z8.unknown()).optional(),
   defaultValue: z8.unknown().optional()
 });
 function formatError2(err) {
@@ -981,10 +981,10 @@ var presetSchema = z9.object({
   userId: z9.string().nullable().optional(),
   roleId: z9.string().nullable().optional(),
   layout: z9.string().optional(),
-  layoutQuery: z9.record(z9.unknown()).optional(),
-  layoutOptions: z9.record(z9.unknown()).optional(),
+  layoutQuery: z9.record(z9.string(), z9.unknown()).optional(),
+  layoutOptions: z9.record(z9.string(), z9.unknown()).optional(),
   search: z9.string().nullable().optional(),
-  filter: z9.record(z9.unknown()).optional(),
+  filter: z9.record(z9.string(), z9.unknown()).optional(),
   icon: z9.string().nullable().optional(),
   color: z9.string().nullable().optional(),
   refreshInterval: z9.number().int().min(0).optional()
@@ -1054,7 +1054,7 @@ function registerContentConfigTools(server, client) {
       description: "Create or update a setting (upsert by key).",
       inputSchema: {
         key: idPathSegmentSchema,
-        value: z9.record(z9.unknown()).describe("Arbitrary JSON value object for the setting."),
+        value: z9.record(z9.string(), z9.unknown()).describe("Arbitrary JSON value object for the setting."),
         scope: z9.string().optional()
       }
     },
@@ -1202,7 +1202,7 @@ var extensionSchema = z12.object({
   type: z12.enum(EXTENSION_TYPES),
   enabled: z12.boolean().optional(),
   bundleUrl: z12.string().min(1).describe("https:, http:, or data:text/javascript bundle URL."),
-  manifest: z12.record(z12.string()).optional(),
+  manifest: z12.record(z12.string(), z12.string()).optional(),
   capabilities: z12.array(z12.string()).optional()
 });
 function registerExtensionTools(server, client) {
@@ -1285,7 +1285,7 @@ function registerExtensionTools(server, client) {
       inputSchema: {
         extensionId: z12.string().min(1),
         marketplaceSlug: z12.string().min(1),
-        publisher: z12.record(z12.unknown()).optional(),
+        publisher: z12.record(z12.string(), z12.unknown()).optional(),
         signature: z12.string().optional(),
         signatureAlg: z12.string().optional(),
         publisherKeyId: z12.string().optional(),
@@ -1317,8 +1317,8 @@ var fieldInputSchema2 = z13.object({
   precision: z13.number().int().positive().optional(),
   scale: z13.number().int().min(0).optional(),
   special: z13.array(z13.string()).optional(),
-  options: z13.record(z13.unknown()).optional(),
-  displayOptions: z13.record(z13.unknown()).optional(),
+  options: z13.record(z13.string(), z13.unknown()).optional(),
+  displayOptions: z13.record(z13.string(), z13.unknown()).optional(),
   conditions: z13.array(z13.unknown()).optional(),
   required: z13.boolean().optional().default(false),
   readonly: z13.boolean().optional().default(false),
@@ -1418,7 +1418,7 @@ var panelQueryShape = {
   aggregate: z14.enum(AGGREGATES).describe("Aggregate function. `field` is required for everything except `count`."),
   field: z14.string().min(1).optional().describe("Field to aggregate (required unless aggregate=count)."),
   groupBy: z14.string().min(1).optional().describe("Field to group rows by (produces a series)."),
-  filter: z14.record(z14.unknown()).optional().describe('Directus-style condition rule, e.g. { status: { _eq: "published" } }.'),
+  filter: z14.record(z14.string(), z14.unknown()).optional().describe('Directus-style condition rule, e.g. { status: { _eq: "published" } }.'),
   dateRange: dateRangeSchema.optional(),
   limit: z14.number().int().min(1).max(1e3).optional().describe("Max grouped rows to return (default 50).")
 };
@@ -1454,7 +1454,7 @@ function registerInsightsTools(server, client) {
       inputSchema: {
         dashboardId: idPathSegmentSchema,
         panelId: idPathSegmentSchema,
-        filter: z14.record(z14.unknown()).optional().describe("Override the panel filter for this run (Directus-style condition rule)."),
+        filter: z14.record(z14.string(), z14.unknown()).optional().describe("Override the panel filter for this run (Directus-style condition rule)."),
         dateRange: dateRangeSchema.optional().describe("Override the panel date range for this run.")
       }
     },
@@ -1556,7 +1556,7 @@ function registerItemTools(server, client) {
       description: "Create a new item in a collection.",
       inputSchema: {
         collection: collectionNameSchema,
-        data: z15.record(z15.unknown()).describe("Field values for the new item"),
+        data: z15.record(z15.string(), z15.unknown()).describe("Field values for the new item"),
         status: z15.enum(["draft", "published"]).optional().default("draft")
       }
     },
@@ -1579,7 +1579,7 @@ function registerItemTools(server, client) {
       inputSchema: {
         collection: collectionNameSchema,
         id: idPathSegmentSchema,
-        data: z15.record(z15.unknown()).describe("Fields to update")
+        data: z15.record(z15.string(), z15.unknown()).describe("Fields to update")
       }
     },
     async ({ collection, id, data: itemData }) => {
@@ -1792,7 +1792,7 @@ function registerPermissionTools(server, client) {
       inputSchema: {
         collection: z19.string().min(1),
         action: z19.enum(["create", "read", "update", "delete", "share"]),
-        item: z19.record(z19.unknown()).optional().describe("Item payload to evaluate row-level rules against.")
+        item: z19.record(z19.string(), z19.unknown()).optional().describe("Item payload to evaluate row-level rules against.")
       }
     },
     async (input) => run(() => client.post("/permissions/check", input))
@@ -1814,7 +1814,7 @@ var relationInputSchema = {
   junctionOneField: z20.string().nullable().optional(),
   sortField: z20.string().nullable().optional(),
   onDelete: z20.enum(["restrict", "cascade", "set null", "no action"]).optional(),
-  meta: z20.record(z20.unknown()).optional()
+  meta: z20.record(z20.string(), z20.unknown()).optional()
 };
 function registerRelationTools(server, client) {
   server.registerTool(
@@ -2114,7 +2114,7 @@ var webhookSchema = z24.object({
   url: z24.string().url(),
   actions: z24.array(z24.string()).optional().describe("Item events that trigger the webhook (e.g. create, update, delete)."),
   collections: z24.array(z24.string()).optional().describe("Collections to filter on (empty = all)."),
-  headers: z24.record(z24.string()).optional(),
+  headers: z24.record(z24.string(), z24.string()).optional(),
   status: z24.enum(["active", "inactive"]).optional(),
   secret: z24.string().nullable().optional()
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumibase/mcp-server",
-  "version": "0.24.1",
+  "version": "0.26.0",
   "description": "LumiBase MCP server — lets AI assistants manage the full LumiBase Content OS: collections, fields, items, relations, RBAC (roles/policies/permissions/API keys), users & teams, intents, flows, webhooks, translations & translation memory, search, media & transform presets, read-only insights, presets, editorial workflow, content releases, share links, read-only deployments, extensions, and site administration.",
   "license": "Apache-2.0",
   "type": "module",
@@ -26,11 +26,11 @@
     "access": "public"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.1",
-    "zod": "^3.25.51"
+    "@modelcontextprotocol/sdk": "^1.30.0",
+    "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@types/node": "^22.0.0",
+    "@types/node": "^26.2.0",
     "tsup": "^8.5.1",
     "typescript": "^5.6.2",
     "vitest": "^4.1.10"